FahamLah

Cloud with AWS glossary

Every Cloud with AWS word in this course, in plain words.

access key
A long-lasting key pair (an ID and a secret) for an IAM user. Avoid it; prefer roles.
In BM lessons: access key: Pasangan kunci tahan lama (ID dan rahsia) untuk pengguna IAM. Elakkan; guna role.
AMI
Amazon Machine Image: the starting disk for a new server, with its operating system.
In BM lessons: AMI: Amazon Machine Image: cakera permulaan untuk server baru, dengan sistem pengendaliannya.
ARN (Amazon Resource Name)
The full address of anything in AWS, like arn:aws:s3:::kedai-menu.
In BM lessons: ARN (Amazon Resource Name): Alamat penuh apa-apa dalam AWS, seperti arn:aws:s3:::kedai-menu.
Availability Zone (AZ)
One wing of the mall, with its own power and cooling. If one wing fails, the others keep going.
In BM lessons: Availability Zone (AZ): Satu sayap pusat beli-belah, dengan elektrik dan penyejuk sendiri. Kalau satu gagal, yang lain terus jalan.
AWS CLI
The aws command: talk to AWS from your terminal instead of clicking.
In BM lessons: AWS CLI: Arahan aws: bercakap dengan AWS dari terminal, bukan dengan klik.
AWS Free Tier
AWS's free offers for new and current accounts. The rules change, so read the official page.
In BM lessons: AWS Free Tier: Tawaran percuma AWS untuk akaun baru dan sedia ada. Peraturannya berubah, jadi baca laman rasmi.
billing alarm
A CloudWatch alarm on your estimated charges. Its data lives in us-east-1.
In BM lessons: billing alarm: Penggera CloudWatch pada anggaran caj anda. Datanya disimpan di us-east-1.
Block Public Access
The master lock on S3 storerooms. On by default for new buckets: nothing goes public by mistake.
In BM lessons: Block Public Access: Kunci utama stor S3. Dihidupkan secara lalai untuk bucket baru: tiada yang jadi awam secara tak sengaja.
budget (AWS Budgets)
A spending limit you set. AWS emails you when the bill passes or will pass it.
In BM lessons: bajet (AWS Budgets): Had perbelanjaan yang anda tetapkan. AWS hantar emel bila bil lepasi, atau akan lepasi, had itu.
CIDR block
A block of addresses, like 10.0.0.0/16. A smaller number after the slash means a bigger block.
In BM lessons: Blok CIDR: Satu blok alamat, seperti 10.0.0.0/16. Nombor lebih kecil selepas garis miring bermaksud blok lebih besar.
clean-up list
Everything you made in a lesson, written down, so you can delete each one after.
In BM lessons: senarai bersihkan: Semua yang anda cipta dalam satu pelajaran, ditulis, supaya anda boleh padam setiap satu selepas itu.
cloud
A giant mall of computers. You rent what you need by the hour, over the internet, and hand it back.
In BM lessons: cloud: Pusat beli-belah komputer yang besar. Anda sewa apa yang perlu ikut jam, melalui internet, dan pulangkan.
CloudFront
AWS's CDN: kiosks near your shoppers that keep copies of your pages, so they load fast.
In BM lessons: CloudFront: CDN AWS: kiosk dekat pembeli anda yang simpan salinan halaman anda, supaya cepat dibuka.
Data transfer out
Data that leaves AWS for the internet. It is billed per GB, so big downloads cost money.
In BM lessons: Data transfer out: Data yang keluar dari AWS ke internet. Ia dicaj ikut GB, jadi muat turun besar ada kos.
EC2 instance
A virtual server you rent by the second or hour. Stop it to pause compute; terminate it to delete it.
In BM lessons: Instance EC2: Server maya yang anda sewa ikut saat atau jam. Stop untuk berehat; terminate untuk padam.
ECR
Elastic Container Registry: your private image shelf in the mall's storeroom. You pay for what you store.
In BM lessons: ECR: Elastic Container Registry: rak image peribadi anda dalam stor pusat beli-belah. Anda bayar apa yang disimpan.
ECS
Elastic Container Service: the mall's manager that runs your containers to a plan.
In BM lessons: ECS: Elastic Container Service: pengurus pusat beli-belah yang jalankan container anda ikut pelan.
ECS service
A promise to keep N copies of a task running. One stops? ECS starts a new one.
In BM lessons: Service ECS: Janji untuk kekalkan N salinan task berjalan. Satu berhenti? ECS mulakan yang baru.
EKS
Elastic Kubernetes Service: AWS runs the Kubernetes control plane for you. Each cluster has an hourly fee.
In BM lessons: EKS: Elastic Kubernetes Service: AWS jalankan control plane Kubernetes untuk anda. Setiap kluster ada caj sejam.
explicit deny
A written Deny that fits the request. It beats every Allow, always.
In BM lessons: explicit deny: Deny bertulis yang padan dengan permintaan. Ia kalahkan setiap Allow, sentiasa.
Fargate
Containers with no servers to look after. The mall gives you a counter; you pay for its CPU and memory while it runs.
In BM lessons: Fargate: Container tanpa server untuk dijaga. Pusat beli-belah beri kaunter; anda bayar CPU dan memorinya selagi ia berjalan.
IAM (Identity and Access Management)
The mall's key office: it decides who may do what in your account. It is free.
In BM lessons: IAM (Identity and Access Management): Pejabat kunci pusat beli-belah: ia tentukan siapa boleh buat apa dalam akaun anda. Percuma.
IAM group
A list of users who share the same keys. Join it, get the keys; leave it, lose them.
In BM lessons: kumpulan IAM: Senarai pengguna yang berkongsi kunci yang sama. Masuk, dapat kunci; keluar, hilang kunci.
IAM Identity Center
The mall's front desk: one sign-in, then a short-lived badge for each account you may enter.
In BM lessons: IAM Identity Center: Kaunter depan pusat beli-belah: satu log masuk, kemudian pas jangka pendek untuk setiap akaun yang dibenarkan.
IAM role
A badge that trusted people or services borrow for a while. It hands out keys that expire.
In BM lessons: IAM role: Pas yang dipinjam orang atau servis yang dipercayai untuk sementara. Ia beri kunci yang luput.
IAM user
A person or app with its own long-lasting password or keys in one account. Use sparingly.
In BM lessons: pengguna IAM: Orang atau aplikasi dengan kata laluan atau kunci tahan lama dalam satu akaun. Guna jarang-jarang.
implicit deny
The default answer: nothing allowed it, so AWS says no.
In BM lessons: implicit deny: Jawapan asal: tiada apa yang benarkan, jadi AWS kata tidak.
Instance type
The size of a server: how much CPU and memory. Bigger costs more per hour.
In BM lessons: Jenis instance: Saiz server: berapa banyak CPU dan memori. Lebih besar, lebih mahal sejam.
Internet gateway
The mall's main entrance from the street. It lets public rows talk to the internet, both ways.
In BM lessons: Internet gateway: Pintu masuk utama pusat beli-belah dari jalan. Ia benarkan baris awam bercakap dengan internet, dua hala.
least privilege
Give only the keys a job needs: these actions, on these things. Nothing more.
In BM lessons: keistimewaan minimum (least privilege): Beri kunci yang kerja itu perlu sahaja: tindakan ini, pada benda ini. Tiada lebih.
Load balancer
The mall's reception desk: it sends each shopper to a healthy counter. Billed while it runs.
In BM lessons: Load balancer: Kaunter penyambut tetamu: ia hantar setiap pembeli ke kaunter yang sihat. Dicaj selagi ia berjalan.
MFA (multi-factor authentication)
A second lock: after the password, you also show a code or a security key.
In BM lessons: MFA (pengesahan pelbagai faktor): Kunci kedua: selepas kata laluan, anda tunjuk kod atau kunci keselamatan juga.
Multi-AZ
A standby copy of your database in another wing. If one wing fails, the standby takes over.
In BM lessons: Multi-AZ: Salinan siap sedia pangkalan data anda di sayap lain. Jika satu sayap gagal, salinan itu ambil alih.
NAT gateway
A one-way staff door: back rooms can go out to fetch things, but nobody outside can walk in. Billed by the hour.
In BM lessons: NAT gateway: Pintu staf sehala: bilik belakang boleh keluar ambil barang, tetapi orang luar tak boleh masuk. Dicaj ikut jam.
Network ACL
The gate of a whole row. Numbered allow and deny rules, lowest first. It remembers nothing.
In BM lessons: Network ACL: Pagar untuk satu baris. Peraturan benarkan dan tolak bernombor, paling rendah dahulu. Ia tak ingat apa-apa.
OIDC identity provider
Tells IAM to trust badges from an outside issuer, like token.actions.githubusercontent.com.
In BM lessons: OIDC identity provider: Beritahu IAM untuk percaya pas dari pengeluar luar, seperti token.actions.githubusercontent.com.
opt-in Region
A newer mall that stays shut until you switch it on for your account. Malaysia is one.
In BM lessons: opt-in Region: Pusat baru yang kekal tutup sehingga anda hidupkan untuk akaun anda. Malaysia salah satunya.
Parameter Store
A noticeboard for settings, with locked notes (SecureString) for secrets. Part of Systems Manager.
In BM lessons: Parameter Store: Papan notis untuk tetapan, dengan nota berkunci (SecureString) untuk rahsia. Sebahagian Systems Manager.
permissions boundary
A fence around one user or role. They can never do more than it allows, whatever else says yes.
In BM lessons: permissions boundary: Pagar sekeliling satu pengguna atau role. Mereka tak boleh buat lebih daripada yang dibenarkannya.
policy
A key card written in JSON: Effect (Allow or Deny), Action (what) and Resource (on which thing).
In BM lessons: polisi (policy): Kad kunci ditulis dalam JSON: Effect (Allow atau Deny), Action (apa) dan Resource (pada benda mana).
Private subnet
A back-room row with no direct road to the internet gateway. Databases live here.
In BM lessons: Subnet peribadi: Baris bilik belakang tanpa jalan terus ke internet gateway. Pangkalan data tinggal di sini.
profile
A named set of settings for the aws command: which account, which role, which Region.
In BM lessons: profil: Set tetapan bernama untuk arahan aws: akaun mana, role mana, Region mana.
Public subnet
A row that faces the street: its route table sends internet traffic to an internet gateway.
In BM lessons: Subnet awam: Baris yang menghadap jalan: jadual laluannya hantar trafik internet ke internet gateway.
RDS
Relational Database Service: a managed database with backups and updates done for you.
In BM lessons: RDS: Relational Database Service: pangkalan data terurus, dengan backup dan kemas kini dibuat untuk anda.
Region
One AWS mall in one part of the world, like ap-southeast-5 in Malaysia.
In BM lessons: Region: Satu pusat beli-belah AWS di satu bahagian dunia, seperti ap-southeast-5 di Malaysia.
root user
The master key made when you open the account. It opens everything, so lock it away.
In BM lessons: pengguna root: Kunci induk yang dibuat semasa akaun dibuka. Ia buka semua, jadi simpan di tempat selamat.
Route 53
AWS's DNS service: the mall directory that turns a name like kedai.example into an address.
In BM lessons: Route 53: Servis DNS AWS: direktori pusat beli-belah yang tukar nama seperti kedai.example kepada alamat.
Route table
The road signs for a row: which way each address goes.
In BM lessons: Jadual laluan: Papan tanda jalan untuk satu baris: ke mana setiap alamat pergi.
S3 bucket
A storeroom for files (objects) in one Region. Its name must be unique.
In BM lessons: Bucket S3: Stor untuk fail (objek) dalam satu Region. Namanya mesti unik.
SCP (service control policy)
A fence around whole accounts in an organization. It never grants keys; it only limits them.
In BM lessons: SCP (service control policy): Pagar sekeliling seluruh akaun dalam organisasi. Ia tak pernah beri kunci; ia hadkan sahaja.
Secrets Manager
A safe for passwords and keys. It can change them on a schedule. Each secret has a monthly charge.
In BM lessons: Secrets Manager: Peti besi untuk kata laluan dan kunci. Ia boleh tukar ikut jadual. Setiap rahsia ada caj bulanan.
Security group
The guard at a unit's door. Allow rules only, and it remembers who came in, so replies go out.
In BM lessons: Security group: Pengawal di pintu unit. Peraturan benarkan sahaja, dan ia ingat siapa masuk, jadi jawapan boleh keluar.
service role
A role that an AWS service borrows to do work for you, like a server reading the menu.
In BM lessons: service role: Role yang dipinjam servis AWS untuk buat kerja bagi pihak anda, seperti server membaca menu.
shared responsibility model
AWS guards the building. You guard what you put inside your unit and who gets your keys.
In BM lessons: model tanggungjawab bersama: AWS jaga bangunan. Anda jaga apa yang ada dalam unit anda dan siapa dapat kunci anda.
Subnet
One row of units inside your VPC, in one wing (Availability Zone). It gets part of the VPC's addresses.
In BM lessons: Subnet: Satu baris unit dalam VPC anda, di satu sayap (Availability Zone). Ia dapat sebahagian alamat VPC.
Target group
The list of counters a load balancer may send shoppers to, with a health check for each.
In BM lessons: Target group: Senarai kaunter yang load balancer boleh hantar pembeli, dengan pemeriksaan kesihatan untuk setiap satu.
Task definition
ECS's recipe card: which image, how much CPU and memory, which ports and settings.
In BM lessons: Task definition: Kad resepi ECS: image mana, berapa CPU dan memori, port dan tetapan mana.
temporary credentials
Keys that expire on their own, from a role or a sign-in. A leak does less harm.
In BM lessons: kelayakan sementara: Kunci yang luput sendiri, dari role atau log masuk. Kebocoran kurang memudaratkan.
trust policy
The note on a role that says who may borrow it: a service, a user, or GitHub Actions.
In BM lessons: trust policy: Nota pada role yang kata siapa boleh pinjam: satu servis, pengguna, atau GitHub Actions.
VPC
Virtual Private Cloud: your own fenced plot of the mall's land. Your servers live inside it.
In BM lessons: VPC: Virtual Private Cloud: lot berpagar anda sendiri dalam tanah pusat beli-belah. Server anda tinggal di dalamnya.
zero spend budget
A ready-made budget that emails you as soon as you spend anything beyond the free limits.
In BM lessons: zero spend budget: Bajet siap guna yang hantar emel sebaik anda belanja apa-apa melebihi had percuma.